Schwachstellen im Stack Anwendungen · Seite 11

Limited control of resource utilization in JS preprocessing

JavaScript preprocessing, webhooks and global scripts can cause uncontrolled CPU, memory, and disk I/O utilization. Preprocessing/webhook/global script configuration and testing are only available to Administrative roles (Admin and Superadmin). Administrative privileges should be typically granted to users who need to perform tasks that require more control over the system. The security risk is limited because not all users have this level of access.

• Auf 1:6.0.23+dfsg-1 aktualisieren
• Auf 5.0.32rc1 aktualisieren
• Auf 6.0.14rc1 (6.0.16 is recommended) aktualisieren
• Auf 6.2.8rc1 aktualisieren
• Auf 6.4.0rc2 aktualisieren

CVE-2023-3128

Grafana is validating Azure AD accounts based on the email claim. On Azure AD, the profile email field is not unique and can be easily modified. This leads to account takeover and authentication bypass when Azure AD OAuth is configured with a multi-tenant app.

• Auf 8.5.27 aktualisieren
• Auf 9.2.20 aktualisieren
• Auf 9.3.16 aktualisieren
• Auf 9.4.13 aktualisieren
• Auf 9.5.4 aktualisieren

CVE-2023-2183

Grafana is an open-source platform for monitoring and observability. The option to send a test alert is not available from the user panel UI for users having the Viewer role. It is still possible for a user with the Viewer role to send a test alert using the API as the API does not check access to this function. This might enable malicious users to abuse the functionality by sending multiple alert messages to e-mail and Slack, spamming users, prepare Phishing attack or block SMTP server. Users may upgrade to version 9.5.3, 9.4.12, 9.3.15, 9.2.19 and 8.5.26 to receive a fix.

• Auf 8.5.26 aktualisieren
• Auf 9.2.19 aktualisieren
• Auf 9.3.15 aktualisieren
• Auf 9.4.12 aktualisieren
• Auf 9.5.3 aktualisieren

CVE-2023-2801

Grafana is an open-source platform for monitoring and observability. Using public dashboards users can query multiple distinct data sources using mixed queries. However such query has a possibility of crashing a Grafana instance. The only feature that uses mixed queries at the moment is public dashboards, but it's also possible to cause this by calling the query API directly. This might enable malicious users to crash Grafana instances through that endpoint. Users may upgrade to version 9.4.12 and 9.5.3 to receive a fix.

• Auf 9.4.12 aktualisieren
• Auf 9.5.3 aktualisieren

CVE-2023-1387

Grafana is an open-source platform for monitoring and observability. Starting with the 9.1 branch, Grafana introduced the ability to search for a JWT in the URL query parameter auth_token and use it as the authentication token. By enabling the "url_login" configuration option (disabled by default), a JWT might be sent to data sources. If an attacker has access to the data source, the leaked token could be used to authenticate to Grafana.

• Auf 9.2.17 aktualisieren
• Auf 9.3.13 aktualisieren
• Auf 9.5.0 aktualisieren

CVE-2023-21968

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affected are Oracle Java SE: 8u361, 8u361-perf, 11.0.18, 17.0.6, 20; Oracle GraalVM Enterprise Edition: 20.3.9, 21.3.5 and 22.3.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM Enterprise Edition accessible data. Note: This vu

• Auf 11.0.19+7~us1-0ubuntu1~18.04.1 aktualisieren
• Auf 11.0.19+7~us1-0ubuntu1~20.04.1 aktualisieren
• Auf 17.0.7+7-1~deb12u1 aktualisieren
• Auf 17.0.7+7~us1-0ubuntu1~18.04 aktualisieren
• Auf 17.0.7+7~us1-0ubuntu1~20.04 aktualisieren
• Auf 17.0.7+7~us1-0ubuntu1~22.04.2 aktualisieren
• Auf 8u372-ga~us1-0ubuntu1~16.04 aktualisieren
• Auf 8u372-ga~us1-0ubuntu1~18.04 aktualisieren
• Auf 8u372-ga~us1-0ubuntu1~20.04 aktualisieren

CVE-2023-21967

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported versions that are affected are Oracle Java SE: 8u361, 8u361-perf, 11.0.18, 17.0.6, 20; Oracle GraalVM Enterprise Edition: 20.3.9, 21.3.5 and 22.3.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Java SE, Oracle GraalVM Enterprise Edition. Note: This vulnera

• Auf 11.0.19+7~us1-0ubuntu1~18.04.1 aktualisieren
• Auf 11.0.19+7~us1-0ubuntu1~20.04.1 aktualisieren
• Auf 17.0.7+7-1~deb12u1 aktualisieren
• Auf 17.0.7+7~us1-0ubuntu1~18.04 aktualisieren
• Auf 17.0.7+7~us1-0ubuntu1~20.04 aktualisieren
• Auf 17.0.7+7~us1-0ubuntu1~22.04.2 aktualisieren
• Auf 8u372-ga~us1-0ubuntu1~16.04 aktualisieren
• Auf 8u372-ga~us1-0ubuntu1~18.04 aktualisieren
• Auf 8u372-ga~us1-0ubuntu1~20.04 aktualisieren

CVE-2023-21954

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Oracle Java SE: 8u361, 8u361-perf, 11.0.18, 17.0.6; Oracle GraalVM Enterprise Edition: 20.3.9, 21.3.5 and 22.3.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM Enterprise Edition accessible data. Note: This v

• Auf 11.0.19+7~us1-0ubuntu1~18.04.1 aktualisieren
• Auf 11.0.19+7~us1-0ubuntu1~20.04.1 aktualisieren
• Auf 17.0.7+7-1~deb12u1 aktualisieren
• Auf 17.0.7+7~us1-0ubuntu1~18.04 aktualisieren
• Auf 17.0.7+7~us1-0ubuntu1~20.04 aktualisieren
• Auf 17.0.7+7~us1-0ubuntu1~22.04.2 aktualisieren
• Auf 8u372-ga~us1-0ubuntu1~16.04 aktualisieren
• Auf 8u372-ga~us1-0ubuntu1~18.04 aktualisieren
• Auf 8u372-ga~us1-0ubuntu1~20.04 aktualisieren

CVE-2023-21939

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Swing). Supported versions that are affected are Oracle Java SE: 8u361, 8u361-perf, 11.0.18, 17.0.6, 20; Oracle GraalVM Enterprise Edition: 20.3.9, 21.3.5 and 22.3.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies

• Auf 11.0.19+7~us1-0ubuntu1~18.04.1 aktualisieren
• Auf 11.0.19+7~us1-0ubuntu1~20.04.1 aktualisieren
• Auf 17.0.7+7-1~deb12u1 aktualisieren
• Auf 17.0.7+7~us1-0ubuntu1~18.04 aktualisieren
• Auf 17.0.7+7~us1-0ubuntu1~20.04 aktualisieren
• Auf 17.0.7+7~us1-0ubuntu1~22.04.2 aktualisieren
• Auf 8u372-ga~us1-0ubuntu1~16.04 aktualisieren
• Auf 8u372-ga~us1-0ubuntu1~18.04 aktualisieren
• Auf 8u372-ga~us1-0ubuntu1~20.04 aktualisieren

CVE-2023-21938

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affected are Oracle Java SE: 8u361, 8u361-perf, 11.0.18, 17.0.6, 20; Oracle GraalVM Enterprise Edition: 20.3.8, 21.3.4 and 22.3.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM Enterprise Edition accessible data. Note: This vu

• Auf 11.0.19+7~us1-0ubuntu1~18.04.1 aktualisieren
• Auf 11.0.19+7~us1-0ubuntu1~20.04.1 aktualisieren
• Auf 17.0.7+7-1~deb12u1 aktualisieren
• Auf 17.0.7+7~us1-0ubuntu1~18.04 aktualisieren
• Auf 17.0.7+7~us1-0ubuntu1~20.04 aktualisieren
• Auf 17.0.7+7~us1-0ubuntu1~22.04.2 aktualisieren
• Auf 8u372-ga~us1-0ubuntu1~16.04 aktualisieren
• Auf 8u372-ga~us1-0ubuntu1~18.04 aktualisieren
• Auf 8u372-ga~us1-0ubuntu1~20.04 aktualisieren

CVE-2023-21937

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking). Supported versions that are affected are Oracle Java SE: 8u361, 8u361-perf, 11.0.18, 17.0.6, 20; Oracle GraalVM Enterprise Edition: 20.3.9, 21.3.5 and 22.3.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM Enterprise Edition accessible data. Note: This v

• Auf 11.0.19+7~us1-0ubuntu1~18.04.1 aktualisieren
• Auf 11.0.19+7~us1-0ubuntu1~20.04.1 aktualisieren
• Auf 17.0.7+7-1~deb12u1 aktualisieren
• Auf 17.0.7+7~us1-0ubuntu1~18.04 aktualisieren
• Auf 17.0.7+7~us1-0ubuntu1~20.04 aktualisieren
• Auf 17.0.7+7~us1-0ubuntu1~22.04.2 aktualisieren
• Auf 8u372-ga~us1-0ubuntu1~16.04 aktualisieren
• Auf 8u372-ga~us1-0ubuntu1~18.04 aktualisieren
• Auf 8u372-ga~us1-0ubuntu1~20.04 aktualisieren

CVE-2023-21930

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported versions that are affected are Oracle Java SE: 8u361, 8u361-perf, 11.0.18, 17.0.6, 20; Oracle GraalVM Enterprise Edition: 20.3.9, 21.3.5 and 22.3.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TLS to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Java SE, Oracle GraalVM Enterprise Edition accessible data as well as

• Auf 11.0.19+7~us1-0ubuntu1~18.04.1 aktualisieren
• Auf 11.0.19+7~us1-0ubuntu1~20.04.1 aktualisieren
• Auf 17.0.7+7-1~deb12u1 aktualisieren
• Auf 17.0.7+7~us1-0ubuntu1~18.04 aktualisieren
• Auf 17.0.7+7~us1-0ubuntu1~20.04 aktualisieren
• Auf 17.0.7+7~us1-0ubuntu1~22.04.2 aktualisieren
• Auf 8u372-ga~us1-0ubuntu1~16.04 aktualisieren
• Auf 8u372-ga~us1-0ubuntu1~18.04 aktualisieren
• Auf 8u372-ga~us1-0ubuntu1~20.04 aktualisieren

Stored XSS in Graphite FunctionDescription tooltip

Grafana is an open-source platform for monitoring and observability.  Grafana had a stored XSS vulnerability in the Graphite FunctionDescription tooltip. The stored XSS vulnerability was possible due the value of the Function Description was not properly sanitized. An attacker needs to have control over the Graphite data source in order to manipulate a function description and a Grafana admin needs to configure the data source, later a Grafana user needs to select a tampered function and hover over the description.  Users may upgrade to version 8.5.22, 9.2.15 and 9.3.11 to receive a fix.

• Auf 8.5.22 aktualisieren
• Auf 9.2.15 aktualisieren
• Auf 9.3.11 aktualisieren

Stored XSS in Grafana Text plugin

Grafana is an open-source platform for monitoring and observability. On 2023-01-01 during an internal audit of Grafana, a member of the security team found a stored XSS vulnerability affecting the core plugin "Text". The stored XSS vulnerability requires several user interactions in order to be fully exploited. The vulnerability was possible due to React's render cycle that will pass though the unsanitized HTML code, but in the next cycle the HTML is cleaned up and saved in Grafana's database. An attacker needs to have the Editor role in order to change a Text panel to include JavaScript. Another user needs to edit the same Text panel, and cl

CVE-2023-0594

Grafana is an open-source platform for monitoring and observability. Starting with the 7.0 branch, Grafana had a stored XSS vulnerability in the trace view visualization. The stored XSS vulnerability was possible due the value of a span's attributes/resources were not properly sanitized and this will be rendered when the span's attributes/resources are expanded. An attacker needs to have the Editor role in order to change the value of a trace view visualization to contain JavaScript. This means that vertical privilege escalation is possible, where a user with Editor role can change to a known password for a user having Admin role if th

• Auf 8.5.21 aktualisieren
• Auf 9.2.13 aktualisieren
• Auf 9.3.8 aktualisieren

CVE-2023-0507

Grafana is an open-source platform for monitoring and observability. Starting with the 8.1 branch, Grafana had a stored XSS vulnerability affecting the core plugin GeoMap. The stored XSS vulnerability was possible due to map attributions weren't properly sanitized and allowed arbitrary JavaScript to be executed in the context of the currently authorized user of the Grafana instance. An attacker needs to have the Editor role in order to change a panel to include a map attribution containing JavaScript. This means that vertical privilege escalation is possible, where a user with Editor role can change to a known password for a user havi

• Auf 8.5.21 aktualisieren
• Auf 9.2.13 aktualisieren
• Auf 9.3.8 aktualisieren

When query caching is enabled in Grafana users can query another users session

Grafana is an open-source platform for monitoring and observability. When datasource query caching is enabled, Grafana caches all headers, including `grafana_session`. As a result, any user that queries a datasource where the caching is enabled can acquire another user’s session. To mitigate the vulnerability you can disable datasource query caching for all datasources. This issue has been patched in versions 9.2.10 and 9.3.4.

Grafana stored XSS in FileUploader component

Grafana is an open-source platform for monitoring and observability. Starting with the 8.1 branch and prior to versions 8.5.16, 9.2.10, and 9.3.4, Grafana had a stored XSS vulnerability affecting the core plugin GeoMap. The stored XSS vulnerability was possible because SVG files weren't properly sanitized and allowed arbitrary JavaScript to be executed in the context of the currently authorized user of the Grafana instance. An attacker needs to have the Editor role in order to change a panel to include either an external URL to a SVG-file containing JavaScript, or use the `data:` scheme to load an inline SVG-file containing JavaScript. This

Grafana vulnerable to spoofing originalUrl of snapshots

Grafana is an open-source platform for monitoring and observability. Prior to versions 8.5.16 and 9.2.8, malicious user can create a snapshot and arbitrarily choose the `originalUrl` parameter by editing the query, thanks to a web proxy. When another user opens the URL of the snapshot, they will be presented with the regular web interface delivered by the trusted Grafana server. The `Open original dashboard` button no longer points to the to the real original dashboard but to the attacker’s injected URL. This issue is fixed in versions 8.5.16 and 9.2.8.

CVE-2023-21843

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Sound). Supported versions that are affected are Oracle Java SE: 8u351, 8u351-perf, 11.0.17, 17.0.5, 19.0.1; Oracle GraalVM Enterprise Edition: 20.3.8, 21.3.4 and 22.3.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM Enterprise Edition accessible data. Note: This vu

• Auf 11.0.18+10-0ubuntu1~18.04.1 aktualisieren
• Auf 11.0.18+10-0ubuntu1~20.04.1 aktualisieren
• Auf 17.0.6+10-0ubuntu1~18.04.1 aktualisieren
• Auf 17.0.6+10-0ubuntu1~20.04.1 aktualisieren
• Auf 17.0.6+10-0ubuntu1~22.04 aktualisieren
• Auf 17.0.6+10-1 aktualisieren
• Auf 21~7ea-1 aktualisieren
• Auf 8u362-ga-0ubuntu1~16.04.1 aktualisieren
• Auf 8u362-ga-0ubuntu1~18.04.1 aktualisieren
• Auf 8u362-ga-0ubuntu1~20.04.1 aktualisieren